$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa File: 4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa (raw, json) Hash identifier: IpWL/d2Av6cjBD9e1y4+5Jn5gRBDoN6eN9VbHpEJEtk= Subject key identifier: F5:90:D3:1E:4F:C5:EB:85:57:A0:96:DB:BE:4B:2A:C8:60:CC:09:2F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797407C5328994AA78F2A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:40:7c:53:28:99:4a:a7:8f:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=75ee417c-0ba4-4ce1-a0ed-d09dbfdb7d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:52:ac:d2:90:c1:cb:98:b4:de:c0:2d:2a: d0:0d:5c:4e:df:f1:5e:be:93:19:3a:ab:e0:b3:32: 92:cb:4b:ee:67:5a:fc:67:9f:8e:08:8a:10:bc:e4: f2:72:70:ef:ca:cd:95:98:50:63:11:b7:70:ff:36: c5:6b:96:c3:f6:53:d5:65:91:d4:3b:28:f1:cd:a4: a9:39:19:1d:aa:e7:50:42:b2:27:72:d8:eb:83:6c: bf:07:a1:82:34:45:35:37:03:19:17:48:01:14:e8: 42:a0:cd:40:41:6a:86:7e:9d:f9:80:e0:e9:cd:e9: 95:1b:4d:99:ce:a4:ea:07:08:cc:ca:65:21:52:75: 49:d1:ac:5a:aa:16:22:ab:b0:6f:b4:95:ba:1a:14: 00:fb:be:14:94:42:4f:7f:db:76:eb:aa:a8:6e:a3: 26:33:86:73:24:d9:4c:6e:3d:ea:99:67:61:a9:9f: fd:06:bd:3d:51:59:f2:40:58:c6:d8:cc:75:7a:23: 7e:ee:f0:d2:c9:38:4c:48:fa:51:00:0f:76:17:44: 2c:b6:b7:a5:6d:eb:7a:97:6d:0e:bc:c4:9c:ed:59: de:e9:06:21:29:c7:76:d7:9c:92:d7:cc:95:06:bd: 4f:65:d5:8b:e6:56:6f:b7:5b:68:43:11:b7:07:d4: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:90:D3:1E:4F:C5:EB:85:57:A0:96:DB:BE:4B:2A:C8:60:CC:09:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a7:dd:ac:e5:72:45:c1:0d:42:6b:2a:a1:f1:db:1e:46:d1: c5:2b:a5:d8:85:29:93:e4:09:96:d2:42:6e:17:bb:ec:be:c3: 1a:7a:31:69:d9:65:71:fb:2a:a2:77:ea:59:7f:71:ff:05:c0: ec:65:58:43:81:8c:f3:f2:62:51:d6:fe:df:cf:6a:a5:11:f3: 70:03:88:b6:5c:38:e0:19:fc:45:6a:2c:50:17:5e:e0:c2:69: d9:3e:de:aa:b0:44:8e:97:b2:84:5e:3c:2f:af:df:d5:01:8c: 1b:c0:d0:fa:7d:aa:41:ae:c0:c8:81:5f:6c:c8:c1:7c:43:e2: e5:3d:2a:14:aa:a2:f3:42:53:50:b9:ac:0f:c3:bb:ca:db:11: 21:9b:86:94:f8:14:07:cb:20:57:fc:a2:83:0e:f0:9c:2f:14: 0d:df:b0:84:c3:ed:6c:e7:5b:b1:47:7a:25:77:32:0d:96:60: 01:0e:40:24:9c:e2:ca:d7:6a:ee:54:4d:a3:32:d2:ec:55:9e: 20:da:4b:05:92:11:2d:01:0a:50:ce:24:f7:5b:aa:99:5b:86: cf:46:18:66:f4:3e:be:4f:d1:66:b9:56:43:d9:db:5d:ed:ac: 69:13:dc:3c:b3:fd:04:be:7a:93:c0:f4:27:f2:33:77:41:36: 83:0e:ca:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0B8UyiZSqePKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzVlZTQxN2MtMGJhNC00Y2UxLWEwZWQtZDA5ZGJmZGI3ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBZSrNKQwcuYtN7ALSrQDVxO3/FevpMZOqvg szKSy0vuZ1r8Z5+OCIoQvOTycnDvys2VmFBjEbdw/zbFa5bD9lPVZZHUOyjxzaSp ORkdqudQQrInctjrg2y/B6GCNEU1NwMZF0gBFOhCoM1AQWqGfp35gODpzemVG02Z zqTqBwjMymUhUnVJ0axaqhYiq7BvtJW6GhQA+74UlEJPf9t266qobqMmM4ZzJNlM bj3qmWdhqZ/9Br09UVnyQFjG2Mx1eiN+7vDSyThMSPpRAA92F0Qstrelbet6l20O vMSc7Vne6QYhKcd215yS18yVBr1PZdWL5lZvt1toQxG3B9Q2FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWQ0x5PxeuFV6CW275LKshgzAkvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY1MmI1YjQtMWI3Ni0z M2E5LTg0MzMtZWU0YzZlNjk2YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACen3azlckXBDUJrKqHx2x5G0cUrpdiFKZPkCZbSQm4Xu+y+wxp6MWnZ ZXH7KqJ36ll/cf8FwOxlWEOBjPPyYlHW/t/PaqUR83ADiLZcOOAZ/EVqLFAXXuDC adk+3qqwRI6XsoRePC+v39UBjBvA0Pp9qkGuwMiBX2zIwXxD4uU9KhSqovNCU1C5 rA/Du8rbESGbhpT4FAfLIFf8ooMO8JwvFA3fsITD7WznW7FHeiV3Mg2WYAEOQCSc 4srXau5UTaMy0uxVniDaSwWSES0BClDOJPdbqplbhs9GGGb0Pr5P0Wa5VkPZ213t rGkT3Dyz/QS+epPA9CfyM3dBNoMOyvA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:41 2025 by rpki-client